Dockerfile

# Build stage
FROM rust:1.75-bookworm as builder

WORKDIR /app
COPY Cargo.toml Cargo.lock ./
COPY src ./src

# Build release binary
RUN cargo build --release

# Runtime stage
FROM debian:bookworm-slim

RUN apt-get update && apt-get install -y \
    ca-certificates \
    tcpdump \
    curl \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /app

# Copy binary from builder
COPY --from=builder /app/target/release/honeypot /app/honeypot

# Copy static files and config
COPY static ./static
COPY config.toml ./config.toml

# Create data directory for GeoIP database
RUN mkdir -p data

# Expose ports (HTTP + commonly attacked ports)
EXPOSE 80 443
EXPOSE 21-23 25 53 110-111 135 139 143 445
EXPOSE 1433 1521 3306 3389 5432 5900 6379 8080 9200 27017

# Run with necessary capabilities
# Note: Container must be run with --cap-add=NET_BIND_SERVICE for low ports
# And --cap-add=NET_RAW for ICMP capture
CMD ["./honeypot"]